城市(city): unknown
省份(region): unknown
国家(country): Japan
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.109.253.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24516
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;221.109.253.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 17:11:36 CST 2025
;; MSG SIZE rcvd: 107
42.253.109.221.in-addr.arpa domain name pointer softbank221109253042.bbtec.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.253.109.221.in-addr.arpa name = softbank221109253042.bbtec.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.172.48.49 | attackspam | probes 3 times on the port 8291 8728 |
2020-05-22 00:03:44 |
| 92.63.196.23 | attackspam | scans 5 times in preceeding hours on the ports (in chronological order) 30006 8005 30002 7007 9004 resulting in total of 5 scans from 92.63.196.0/24 block. |
2020-05-22 00:31:57 |
| 194.26.29.216 | attackspam | scans 31 times in preceeding hours on the ports (in chronological order) 38710 38872 38661 38756 38735 38734 38673 38664 38672 38898 38670 38817 38631 38635 38698 38653 38649 38625 38661 38636 38632 38771 38647 38683 38721 38643 38623 38776 38695 38723 38706 resulting in total of 51 scans from 194.26.29.0/24 block. |
2020-05-22 00:17:18 |
| 159.192.225.167 | attack | Unauthorized connection attempt from IP address 159.192.225.167 on Port 445(SMB) |
2020-05-22 00:12:03 |
| 188.227.84.206 | spam | Spam Email claiming to be Microsoft asking for log in credentials. |
2020-05-22 00:26:34 |
| 139.59.18.197 | attackbotsspam | May 21 17:34:17 OPSO sshd\[13050\]: Invalid user azr from 139.59.18.197 port 39808 May 21 17:34:17 OPSO sshd\[13050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 May 21 17:34:19 OPSO sshd\[13050\]: Failed password for invalid user azr from 139.59.18.197 port 39808 ssh2 May 21 17:36:26 OPSO sshd\[13729\]: Invalid user eyl from 139.59.18.197 port 39918 May 21 17:36:26 OPSO sshd\[13729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 |
2020-05-22 00:03:07 |
| 51.254.37.192 | attackbotsspam | 2020-05-21T11:37:20.6033701495-001 sshd[3919]: Invalid user geql from 51.254.37.192 port 54862 2020-05-21T11:37:22.3706451495-001 sshd[3919]: Failed password for invalid user geql from 51.254.37.192 port 54862 ssh2 2020-05-21T11:40:44.5690341495-001 sshd[4022]: Invalid user obu from 51.254.37.192 port 59316 2020-05-21T11:40:44.5797031495-001 sshd[4022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.gogoski.fr 2020-05-21T11:40:44.5690341495-001 sshd[4022]: Invalid user obu from 51.254.37.192 port 59316 2020-05-21T11:40:47.1242221495-001 sshd[4022]: Failed password for invalid user obu from 51.254.37.192 port 59316 ssh2 ... |
2020-05-22 00:00:22 |
| 134.209.63.140 | attack | firewall-block, port(s): 14606/tcp |
2020-05-21 23:56:39 |
| 185.175.93.23 | attack | ET DROP Dshield Block Listed Source group 1 - port: 5926 proto: TCP cat: Misc Attack |
2020-05-22 00:20:42 |
| 185.153.196.225 | attack | Fail2Ban Ban Triggered |
2020-05-22 00:24:48 |
| 113.160.198.78 | attack | Unauthorized connection attempt from IP address 113.160.198.78 on Port 445(SMB) |
2020-05-21 23:52:05 |
| 194.31.244.46 | attackbots | May 21 16:43:01 debian-2gb-nbg1-2 kernel: \[12331002.479052\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.31.244.46 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61275 PROTO=TCP SPT=46662 DPT=24020 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-22 00:16:13 |
| 172.104.242.173 | attackspam | May 21 16:25:28 debian-2gb-nbg1-2 kernel: \[12329950.064018\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=172.104.242.173 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=6510 PROTO=TCP SPT=45700 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-22 00:28:32 |
| 128.46.74.84 | attack | 2020-05-20 07:54:43 server sshd[48162]: Failed password for invalid user zwm from 128.46.74.84 port 52850 ssh2 |
2020-05-22 00:12:36 |
| 89.144.47.246 | attackbotsspam | SmallBizIT.US 1 packets to tcp(3389) |
2020-05-22 00:07:51 |